Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-Ulx_Ha1_CC80i7RSVKXzBn_4BY.roa
File: 1-Ulx_Ha1_CC80i7RSVKXzBn_4BY.roa (raw, json)
Hash identifier: uC+9GrFqI4RFMLChA21AjUhU/dbkBBsK8IWfZlWDhWQ=
Subject key identifier: F9:49:71:FC:76:B5:FC:20:BC:D2:2E:D1:49:52:97:CC:19:FF:E0:16
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019794558A6235560D95F14CDB4FAF5B9C52
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-Ulx_Ha1_CC80i7RSVKXzBn_4BY.roa
Signing time: Sat 21 Jun 2025 21:12:03 +0000
ROA not before: Sat 21 Jun 2025 21:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 87.229.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 11:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:55:8a:62:35:56:0d:95:f1:4c:db:4f:af:5b:9c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 21 21:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f94971fc76b5fc20bcd22ed1495297cc19ffe016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:12:17:59:6b:8b:3b:97:55:39:3e:f2:58:
33:d9:a8:56:85:e3:54:81:e1:51:64:20:24:6f:d3:
7e:ca:a5:3c:86:98:3e:72:b1:27:88:99:05:5e:46:
ce:de:43:37:b4:e1:aa:c0:94:a6:c3:b0:3f:47:04:
f4:82:f2:5d:63:d5:66:5d:35:49:48:21:22:6a:71:
c0:5b:14:15:d2:93:7b:0d:d2:85:d8:0e:60:9a:b3:
6b:2c:bd:bf:26:33:20:20:40:06:2f:b6:10:c5:ad:
38:45:50:70:70:be:c1:3a:38:83:16:56:1c:cb:88:
35:bd:cc:cd:db:7a:d5:ef:78:e8:76:b5:25:c5:2d:
42:62:80:0a:f9:5f:f5:bf:96:25:86:e1:88:ba:3b:
1e:93:a8:48:14:fb:89:09:04:24:b7:0c:0a:3f:f3:
00:3f:63:a5:ad:78:99:7f:37:f3:88:a3:50:16:ce:
08:de:68:c5:4e:b3:c5:59:c9:60:14:5a:a9:bc:96:
b7:b6:19:18:97:19:34:c0:82:d2:15:ff:17:15:ce:
c9:6f:d6:e2:62:f4:4d:32:b7:db:5a:95:08:1f:c9:
0d:a3:aa:de:fc:72:e9:83:37:11:43:6b:3a:81:d7:
4b:e1:84:63:d1:4a:67:be:9b:cd:09:1c:c3:a8:bd:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:71:FC:76:B5:FC:20:BC:D2:2E:D1:49:52:97:CC:19:FF:E0:16
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1-Ulx_Ha1_CC80i7RSVKXzBn_4BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.31.0/24
Signature Algorithm: sha256WithRSAEncryption
28:86:85:dd:e5:b0:fb:cd:ba:6d:36:4e:34:b7:74:5c:c4:91:
95:30:da:45:66:90:ba:66:b4:ab:8f:db:13:24:20:bf:c2:df:
02:a0:04:33:eb:b5:c0:0d:20:96:e9:dd:37:76:bd:92:5c:fd:
9b:b3:46:ee:ea:f3:e7:40:89:af:24:a1:e8:50:4e:9e:dd:de:
da:46:2f:19:aa:13:fd:ab:70:e0:5b:cd:d2:31:1b:f3:26:9b:
f6:c8:55:1c:b4:d6:9c:c7:4a:ed:fe:4d:e4:de:60:c9:c8:db:
ba:8a:9b:24:25:26:74:5b:9d:a2:1e:3d:54:e3:e8:e4:a1:ff:
2c:29:ff:2d:96:30:fd:54:e7:ce:33:bb:f8:e9:7d:7f:4a:26:
b9:75:ba:42:d7:94:0f:b4:b9:f9:73:6a:7d:c7:21:8f:b4:d6:
81:e3:f4:0e:99:cd:3a:cb:d0:0a:74:e8:72:14:f6:97:05:23:
e2:46:fd:9d:a3:22:e4:6f:be:16:8b:00:ff:c2:4b:4c:bd:62:
57:b3:b5:39:f4:07:bd:35:ff:66:e9:07:94:b7:4a:4f:92:a4:
e2:86:d4:5b:5c:24:be:18:18:72:3f:8d:41:71:2a:80:74:ba:
d5:72:eb:db:90:1d:ff:58:95:ff:44:23:19:f5:7e:d6:fc:79:
36:c2:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:38:37 2025 by rpki-client